"Only staff and third parties including service providers who are entitled to see the information, have access to it and they may only use it for the purposes stated." . . . . .